EDB-49876
PoCSubrion CMS 4.2.1 - Arbitrary File Upload
view exploit source exploit_dbtype webappsauthor Fellipe Oliveirapublished 2021-05-17catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-19422US | high7.2 | Exploit | ||
/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan